CVE-2009-4549: Cdmi a2 Media Player Pro

High severity, CVSS 9.3. EPSS: 4.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in A2 Media Player Pro 2.51 allows remote attackers to execute arbitrary code via a long string in a (1) .m3u or (2) .m3l playlist file.

Affected products

• Cdmi a2 Media Player Pro: version 2.51 only

Published 2010-01-04. Last modified 2026-06-16.